Merge pull request #20 from DataDog/emilehugo.spir/update-attacks

Update attacks to work around changes to the detection rule

Author: Taiki-San

cli/attacks/auth.js

@@ -89,6 +89,9 @@ async function bruteforce(targetURL){
             data : {
                 "email": "bla@bla.com" ,
                 "password": "notblabla"
+            },
+            headers: {
+                'X-Forwarded-For': '1.2.3.4'
             }
         };
         spinner.text = 'Attempting login with incorrect password';

cli/attacks/ssrf.js

@@ -82,7 +82,8 @@ async function exploit(targetURL){
         headers: {
             'Cookie': "token=" + info.token,
             'Authorization': 'Bearer '+info.token,
-            'Content-Type': 'application/x-www-form-urlencoded'
+            'Content-Type': 'application/x-www-form-urlencoded',
+            'X-Forwarded-For': '1.2.3.4'
         },
         // data : {
         //     imageUrl: payload